Each method has advantages. Using an AWS S3 source is more reliable, while using a CloudFormation template allows you to customize your logs by adding more information and filtering unwanted data. In addition, the Security Groups dashboard relies on customized logs generated from the Lambda function created with the CloudFormation template from logs sent to CloudWatch Logs.